9946 matches found
CVE-2019-7554: Improper Neutralization of Input During Web Page Generation
An issue was discovered in PHP Scripts Mall API Based Travel Booking 3.4.7. There is Reflected XSS via the flight-results.php d2 parameter...
WordPress Event Management Tickets Booking plugin <= 1.0.5 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability found by Admavidhya N in WordPress Event Management Tickets Booking plugin versions = 1.0.5. Solution Update the WordPress Event Management Tickets Booking plugin to the latest available version at least 1.0.6...
Event Management Tickets Booking By Event Monster <= 1.0.5 - Stored XSS
The Event Management Tickets Booking By Event Monster WordPress plugin was affected by a Stored XSS security vulnerability...
WordPress WP Booking System <= 1.5.1.1 - CSRF vulnerability to Authenticated SQL Injection vulnerability
CSRF vulnerability to Authenticated SQL Injection vulnerability possible in WordPress WP Booking System versions = 1.5.1.1 found by Magnus K. Stubman. Solution Update the WordPress WP Booking System to the latest available version at least 1.5.2...
WP Booking System <= 1.5.1.1 - CSRF to Authenticated SQL Injection
According to the original researcher, no CSRF nonces were present and therefore could be exploited by chaining with the CSRF issue...
WordPress WP Booking System Plugin < 1.5.2 CSRF Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
CVE-2019-12239
The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL injection issues that require administrative access...
CVE-2019-12239
The CVE-2019-12239 entry concerns the WordPress WP Booking System plugin (version 1.5.1) with a lack of CSRF protection, which allows reaching SQL injection issues that require administrative access. Connected documents confirm this vulnerability and its remediation guidance, e.g., Patchstack and...
PT-2019-12710 · WordPress · Wp Booking System
Name of the Vulnerable Software and Affected Versions: WP Booking System plugin version 1.5.1 Description: The issue is related to the lack of CSRF protection, which can allow attackers to exploit certain SQL injection issues that require administrative access. Recommendations: For WP Booking...
CVE-2019-12239: Improper Neutralization of Special Elements used in an SQL Command
The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL injection issues that require administrative access...
WordPress Travel Booking theme <= 2.7.8.3 - Reflected & Stored Cross-Site Scripting (XSS) vulnerabilities
Reflected & Stored Cross-Site Scripting XSS vulnerabilities found by QUIXSS in WordPress Travel Booking theme versions = 2.7.8.3. Solution Update the WordPress Travel Booking theme to the latest available version at least 2.7.8.4...
Dynamic Web App has a logic flaw vulnerability
Movie.com APP is a mobile sports venue booking software. A logic flaw vulnerability exists in Movie.com APP, which can be exploited by an attacker to log in to any account to withdraw cash...
WordPress Booking Calendar Plugin < 8.4.5 SQL Injection Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
uHotelBooking System - system_page SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: uHotelBooking System - 'systempage' SQL Injection Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.hotel-booking-script.com Demo Site: https://www.hotel-booking-script.com/demo/ Version: Lastest Tested on: Kali Lin...
CVE-2018-20556
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the bookingid parameter...
CVE-2018-20556
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the bookingid parameter...
Sql injection
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the bookingid parameter...
uHotelBooking System - system_page SQL Injection
uHotelBooking System - systempage SQL Injection Exploit Title: uHotelBooking System - 'systempage' SQL Injection Date: 21.03.2019 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.hotel-booking-script.com Demo Site: https://www.hotel-booking-script.com/demo/ Version: Lastest Tested o...
uHotelBooking System - 'system_page' SQL Injection
Exploit Title: uHotelBooking System - 'systempage' SQL Injection Date: 21.03.2019 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.hotel-booking-script.com Demo Site: https://www.hotel-booking-script.com/demo/ Version: Lastest Tested on: Kali Linux CVE: N/A Description: uHotelBookin...
